Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File:                     kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier:          I8UIbymUfKA6cYTpJHopb3lqPOU7oEvJSrOWoW++nyg=
Subject key identifier:   7F:98:AF:1A:6F:98:DD:5E:8C:7E:08:96:C3:E4:1E:8A:A4:8C:09:52
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer:       /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial:       01962DF44BC997D541617B8B0083AC69D7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number:          0549
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
                          2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: TCzcIpFALuCepXjU6Iv0+UiSDaae/21FUcqjN6TsdWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4b:c9:97:d5:41:61:7b:8b:00:83:ac:69:d7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=7f98af1a6f98dd5e8c7e0896c3e41e8aa48c0952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:b7:b3:07:ab:9f:de:91:7c:22:d7:31:d4:
                    f2:e6:40:c8:c7:04:8f:94:9b:18:be:bc:87:df:d3:
                    1e:0c:50:12:e5:9c:2f:60:ba:1e:1e:2d:14:30:71:
                    23:7d:fe:c6:66:54:0e:04:b0:bc:64:40:d2:e5:66:
                    c1:ec:3a:af:82:73:22:6e:dc:30:29:58:4d:9f:f5:
                    7a:60:bc:91:48:fc:1b:58:ac:45:b6:37:9c:e4:ac:
                    58:81:a4:81:a5:68:b6:22:4d:f2:00:fb:24:2f:90:
                    bf:c8:a9:5a:1d:ac:01:eb:41:5f:b3:e8:55:c6:52:
                    88:a3:1f:84:f8:ec:49:e4:df:a9:13:90:31:f1:68:
                    fd:fa:dd:cb:55:19:a2:f2:fb:d7:69:d2:ce:aa:0b:
                    ae:8b:53:b1:ed:c2:e0:bf:00:70:9b:e7:dd:18:9b:
                    02:cb:42:b4:15:4f:da:c6:e4:c9:97:74:fc:48:f9:
                    d7:1b:a6:3e:38:72:b5:d8:ec:26:f5:97:07:ab:94:
                    96:dc:91:c7:b4:28:4f:8c:59:ef:25:7e:e0:4b:52:
                    76:45:00:75:e1:31:43:5d:2b:d1:90:84:39:d0:3a:
                    53:59:a8:20:2b:1f:20:8a:28:47:28:5f:6c:5b:71:
                    c9:d2:89:a7:c0:b3:47:ba:be:e8:c8:53:29:e3:3b:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:AF:1A:6F:98:DD:5E:8C:7E:08:96:C3:E4:1E:8A:A4:8C:09:52
            X509v3 Authority Key Identifier:
                keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:96:a2:b1:75:ac:b3:ed:76:6a:d3:bf:fd:9e:09:4a:84:c4:
         ef:43:91:aa:0b:33:42:aa:46:08:1a:7e:ce:b2:7d:6d:3d:7b:
         99:c8:fb:0c:f6:1f:c6:1e:09:bb:26:53:74:54:d8:05:e3:b9:
         94:14:a5:74:07:f7:a7:ca:9d:a2:5c:ca:8a:a9:99:bc:c5:9a:
         4b:10:e5:62:46:31:e5:06:91:ff:a7:de:c3:ec:a6:01:19:ec:
         20:f5:9f:96:6a:f7:46:58:95:d9:11:54:97:04:35:bc:c1:28:
         39:57:1a:86:11:c3:e6:a2:9e:c3:53:bd:e4:d9:e2:e0:02:00:
         8d:22:f7:c6:f3:3e:dc:96:cd:3f:87:b8:90:b4:c3:50:b1:74:
         16:d1:87:3e:94:66:fb:c5:4a:04:3b:49:b6:42:ae:8e:02:9c:
         92:6c:c5:8a:c0:21:67:29:e5:a9:ba:0b:a6:91:6c:38:d2:e4:
         79:78:3e:e1:c8:8c:16:99:b9:0e:3b:fa:68:3a:ef:f5:17:a3:
         02:6c:e0:fe:cb:64:5c:24:f0:4b:9b:e7:40:e7:54:d6:2f:3b:
         cf:e4:cd:0d:b3:68:19:68:f8:3f:c6:22:7b:e4:b1:bb:d8:b0:
         ae:f6:5c:99:9e:3e:38:c4:ff:a0:4a:78:21:80:80:73:77:ed:
         e9:fa:0a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EvJl9VBYXuLAIOsadf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj
OThjN2UwHhcNMjUwNDEzMDcwMTQ2WhcNMjUwNDE0MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg3Zjk4YWYxYTZmOThkZDVlOGM3ZTA4OTZjM2U0MWU4YWE0OGMwOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zi3swern96RfCLXMdTy5kDIxwSP
lJsYvryH39MeDFAS5ZwvYLoeHi0UMHEjff7GZlQOBLC8ZEDS5WbB7DqvgnMibtww
KVhNn/V6YLyRSPwbWKxFtjec5KxYgaSBpWi2Ik3yAPskL5C/yKlaHawB60Ffs+hV
xlKIox+E+OxJ5N+pE5Ax8Wj9+t3LVRmi8vvXadLOqguui1Ox7cLgvwBwm+fdGJsC
y0K0FU/axuTJl3T8SPnXG6Y+OHK12Owm9ZcHq5SW3JHHtChPjFnvJX7gS1J2RQB1
4TFDXSvRkIQ50DpTWaggKx8giihHKF9sW3HJ0omnwLNHur7oyFMp4zuuOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+YrxpvmN1ejH4IlsPkHoqkjAlSMB8GA1UdIwQY
MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt
YjI0OGNmYTk2YTY5LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5
LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZaisXWs
s+12atO//Z4JSoTE70ORqgszQqpGCBp+zrJ9bT17mcj7DPYfxh4JuyZTdFTYBeO5
lBSldAf3p8qdolzKiqmZvMWaSxDlYkYx5QaR/6few+ymARnsIPWflmr3RliV2RFU
lwQ1vMEoOVcahhHD5qKew1O95Nni4AIAjSL3xvM+3JbNP4e4kLTDULF0FtGHPpRm
+8VKBDtJtkKujgKckmzFisAhZynlqboLppFsONLkeXg+4ciMFpm5Djv6aDrv9Rej
Amzg/stkXCTwS5vnQOdU1i87z+TNDbNoGWj4P8Yie+Sxu9iwrvZcmZ4+OMT/oEp4
IYCAc3ft6foKyQ==
-----END CERTIFICATE-----